Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
511 7.4 重要
Adjacent 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft … 		Windows TCP/IP のサービス拒否の脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-40414 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
512 8.1 重要
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft … 		Windows TCP/IP のリモートでコードが実行される脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-40415 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
513 4.3 警告
Network 		マイクロソフト Microsoft Word
Microsoft 365 Apps
Microsoft Office 		Microsoft Word の情報漏えいの脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-40421 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
514 8.8 重要
Network 		マイクロソフト Windows Admin Center Azure potal 上の Windows Admin Center の特権昇格の脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-41086 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
515 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 10 22h2
Microsoft Windows Server 2022
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 New CWE-73
ファイル名やパス名の外部制御 		CVE-2026-41088 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
516 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Windows Netlogon のリモートでコードが実行される脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-41089 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
517 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Data Deduplication Elevation of Privilege Vulnerability New CWE-416
解放済みメモリの使用 		CVE-2026-41095 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
518 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows DNS クライアントのリモートでコードが実行される脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-41096 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
519 6.7 警告
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft … 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 New CWE-1329
アップデートができないコンポーネントへの依存 		CVE-2026-41097 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
520 4.4 警告
Local 		マイクロソフト Microsoft 365 Copilot Android 用の Microsoft 365 Copilot のスプーフィングの脆弱性 New CWE-284
CWE-Other
CVE-2026-41100 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352501 - my_postcards my_postcards_platinum Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NVD-CWE-Other
CVE-2002-1966 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352502 - mark_hanson xircon Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) msg, or (4) notice command. NVD-CWE-Other
CVE-2002-1967 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352503 - com21 doxport_1100 Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal ne… NVD-CWE-Other
CVE-2002-1968 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352504 - the_magic_notebook the_magic_notebook Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login. NVD-CWE-Other
CVE-2002-1969 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352505 - snortcenter snortcenter SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passw… NVD-CWE-Other
CVE-2002-1970 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352506 - sourcecraft networking_utils The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument. NVD-CWE-Other
CVE-2002-1971 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352507 - sebastian_dehne pp_powerswitch Unknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports. NVD-CWE-Other
CVE-2002-1972 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352508 - sharp zaurus The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root. NVD-CWE-Other
CVE-2002-1974 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352509 - qualcomm eudora Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment w… NVD-CWE-Other
CVE-2002-1210 2008-09-6 05:30 2002-11-29 Show GitHub Exploit DB Packet Storm
352510 - kde kde Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScri… NVD-CWE-Other
CVE-2002-1223 2008-09-6 05:30 2002-10-28 Show GitHub Exploit DB Packet Storm